Blog

Everything you need to know about choosing a SAML provider for enterprise SSO in modern B2B platforms.

Everything you need to know about OTPs, from HOTP and TOTP internals to real-world pros and cons, plus how WorkOS can help you implement them cleanly.

WorkOS is a proud partner in the Microsoft Entra Agent ID partner ecosystem.

Everything you need to know to implement and validate JWTs securely in Go: from signing to verifying with JWKS, with code examples and best practices throughout.

A developer-focused walkthrough of SAML SSO for developers who want to understand all the moving parts without needing a PhD in XML sorcery.

A practical guide to choosing the right machine authentication model for your SaaS product.

Understanding the intent behind 401 vs 403, 400 vs 422, and other misunderstood status codes.

The illusion of free: How open source SSO quietly makes your team the vendor, the patch manager, and the on-call ops team.

Agnost provides analytics for MCP servers, tracking tool invocations, latency, errors, and user journeys across Claude Desktop, VS Code, and other AI clients.

Why SCIM looks easy on paper but is one of the hardest integrations to build and scale in practice.

Password sharing quietly eats away at seat-based revenue and introduces risk when companies tighten authentication rules. WorkOS Radar gives teams a smarter way to detect shared credentials, reduce false positives, and protect growth.

Explore how SCIM’s advanced features, bulk operations and filtering, make identity synchronization faster and more efficient for large-scale environments.

Learn what session revocation is, why it’s essential for securing user and AI agent sessions, and how WorkOS makes it simple to build “Sign Out Everywhere” into your app with just a few lines of code.

API Keys, Stripe Billing Seat Sync, AI Branding Assistant, & more

WorkOS now supports automated seat-based billing with Stripe. It tracks organization members and sends seat usage to Stripe Meters so billing stays accurate without custom scripts, webhooks, or billing infrastructure.